Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo worldlearning.org

Group: Lockbit3

Discovered by ransomware.live: 2023-06-07

Estimated attack date: 2023-06-07

Description:

World Learning is international organization that focuses on international development, education, and exchange programs. Based in Brattleboro, Vermont, World Learning "unlocks the potential of people to address critical global issues" through its co...



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • registrar-abuse@cloudflare.com
MX Records
  • worldlearning-org.mail.protection.outlook.com.
TXT Records
  • v=spf1 a mx ip4:54.71.122.122 ip4:54.189.247.173 ip4:4.7.16.188 ip4:74.121.51.179 ip4:64.222.81.19 ip4:199.231.134.73 ip4:142.4.30.82 ip4:206.107.42.254 ip4:10.10.0.136 include:lsoft.com include:_spf.salesforce.com include:spf.predictiveresponse.net incl" "ude:_spf.intacct.com include:spf.protection.outlook.com include:_spf.google.com ~all
  • intacct-esk=4FED1A6BEA53EE91E053D806A8C0A486
Cloud / SaaS Services Detected
Salesforce Sage

Leak Screenshot:

Leak Screenshot